Vulnerabilities

CVSS

7.3 High

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Risk score

58.4

Published

2026-08-03

Status

Analyzed

An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary files and conduct denial-of-service during installation.

Weaknesses

CWE-276

Coverage 1

vulnerability

Vulnérabilité dans Synology Assistant (10 août 2026)

A vulnerability has been identified in Synology Assistant, allowing an attacker to compromise data confidentiality, data integrity, and cause a denial of service. Users of versions prior to 7.0.7-50095 are strongly advis…

CERT-FR · Aug 10, 2026 Medium

CVE-2026-4793synologyvulnerabilitysecurity

All articles mentioning it

Advisories and references

• synology.com/en-global/security/advisory/Synology_SA_26_12